GO-2026-4601 vulnerabilities

Vulnerabilities for packages: kafkaexporter, kubernetes-csi-driver-nfs, argo-rollouts, prometheus, restic, crossplane-provider-aws-route53, kubewatch, docker-compose, migrate, tempo, nsc, apache-exporter, kubernetes-csi-external-attacher, step-kms-plugin, litestream, kubernetes-replicator,...

GO-2026-5039 vulnerabilities

Vulnerabilities for packages: trufflehog, aws-nuke, guac, envconsul, kubeflow-katib, xeol, kbld, multus-cni, podinfo, sftpgo-plugin-auth, argo-rollouts, pinact, prometheus, secrets-store-csi-driver, src-fingerprint, witness, crossplane-provider-aws-route53, kaniko, runc, spire-server,...

GO-2026-5037 vulnerabilities

Vulnerabilities for packages: trufflehog, aws-nuke, guac, envconsul, kubeflow-katib, xeol, kbld, multus-cni, podinfo, sftpgo-plugin-auth, argo-rollouts, pinact, prometheus, secrets-store-csi-driver, src-fingerprint, witness, crossplane-provider-aws-route53, kaniko, runc, spire-server,...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: k8sgateway, sonobuoy, guac, kubeflow-katib, kuberlr, nri-nginx, xeol, esbuild, kbld, kapp, kubernetes-csi-driver-nfs, podinfo, sftpgo-plugin-auth, secrets-store-csi-driver, src-fingerprint, restic, runc, spire-server, neuvector-sigstore-interface,...

GHSA-FF52-PH69-CF7X vulnerabilities

Vulnerabilities for packages: prometheus-alertmanager-fips, mongodb-kubernetes-operator-fips, chronyexporter, knative-operator-fips, keda-http-add-on-fips, gogatekeeper, mlrun-log-collector-fips, step-ca, chainctl-fips, nginx-kubernetes-ingress-fips, monstache, ocm-cli-fips,...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: xeol, kafkaexporter, kubernetes-csi-driver-nfs, argo-rollouts, envoy-ratelimit, prometheus, kubewatch, migrate, cloud-provider-azure, helm-push, nsc, apache-exporter, dfc, kubernetes-csi-external-attacher, step-kms-plugin, litestream, mockery, kubernetes-replicator,...

CLEANSTART-2026-DG06447 Security fixes for CVE-2025-47911, CVE-2025-58190, CVE-2025-61726, CVE-2025-61728, CVE-2025-61730, CVE-2025-61732, CVE-2025-68119, CVE-2025-68121, CVE-2026-25679, CVE-2026-27139, CVE-2026-27142 applied in versions: 2.12.2-r0, 2.12.2-r1

Multiple security vulnerabilities affect the kubernetes-replicator-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

GHSA-5MH9-3JWC-RP59 vulnerabilities

Vulnerabilities for packages: hubble-ui-backend-fips, sigstore-scaffolding-fips, knative-operator-fips, gcp-compute-persistent-disk-csi-driver-fips, flannel-cni-plugin-fips, gogatekeeper, keda-fips, kubelet-csr-approver, vertical-pod-autoscaler-fips, kuberay-operator-fips, monstache,...